Privacy Policy
Last updated: October 10, 2026
This Privacy Policy explains how TheLoop Holdings, LLC ("we", "us", or "our") collects, uses, shares, and protects personal information when you use QuitBet. It covers the QuitBet app for iOS and our website at quitbet.co (together, the "Service"). It also explains the choices and rights you have.
QuitBet helps people who want to stop gambling. Much of what you tell us in the app is personal, and some of it is health-related. We treat it that way.
The short version
- We use your recovery data to run the features you use. We do not use it for advertising.
- We do not sell your personal information for money.
- We do not share your check-ins, urge logs, notes, quit plan, chats, forum posts, AI coach conversations, or other recovery data with advertising partners.
- If you allow tracking on your iPhone, we share your device's advertising identifier and app install and subscription events with advertising and attribution partners to measure our ad campaigns. You can say no.
- You can delete your account in the app or by emailing us.
Our Cookie Policy explains cookies and browser storage on our website. Our Consumer Health Data Privacy Policy gives more detail on health-related data for residents of Washington, Nevada, and Connecticut.
1. Who We Are
TheLoop Holdings, LLC is a Delaware limited liability company. We operate QuitBet, and we are responsible for the personal information described in this policy (in some laws, we are called the "controller"). QuitBet is the name of our product.
You can reach us by email at support@quitbet.co. Formal legal notices can be sent to our registered agent at 131 Continental Dr, Suite 305, Newark, DE 19713, USA.
This policy applies to the QuitBet iOS app and to quitbet.co. It does not apply to websites or services run by others, even if we link to them. Apple handles App Store payments under its own privacy policy.
2. Information We Collect
What we collect depends on how you use the Service. Some features only work if you give us certain information.
Information you give us
- Account information. Your email address, the display name or username you choose, and the details needed to sign in to your account.
- Recovery data. Your answers to the trigger and gambling-pattern check (such as the kinds of gambling you do, how often, and what tends to set you off), your quit plan and goals, daily check-ins, urges you log, mood and notes, relapses or streak resets, money-related figures you enter to track savings, and your progress in guided programs, lessons, and urge exercises. See Section 3.
- AI coach messages. The messages you send to the AI coach and the replies it gives you.
- Community content. Posts, replies, and messages you share in the Community Forum and group chat, the profile details other users can see, and reports you submit about content or users.
- Blocker settings. The websites, apps, or categories you choose to block.
- Messages to us. If you email us or use the contact form on our website, we receive your name, email address, and whatever you write.
Information collected automatically
When you use the app, we and our service providers collect:
- Device and app information, such as device model, operating system version, app version, and language.
- Identifiers, such as your account ID, identifiers for your app installation, and your IP address. If you allow tracking under Apple's App Tracking Transparency, we also collect your device's advertising identifier (IDFA).
- Usage information, such as screens viewed, features used, onboarding steps completed, and in-app purchase events.
- Crash and performance data, such as crash logs and diagnostics.
When you visit our website, what we collect depends on your cookie choice. Section 8 and our Cookie Policy explain this.
Information from other sources
- Apple. When you subscribe, Apple tells us (directly or through our subscription management provider) about your purchase, such as the plan you bought and renewal or expiration dates. Apple processes your payment. We do not receive your payment card details.
- Advertising and attribution partners. If you came to QuitBet from an ad, these partners may tell us which campaign or ad network led to your install, as Apple's rules and your settings allow.
3. Recovery Data Is Sensitive
We treat your recovery data as health-related and sensitive. This includes anything that shows you are dealing with gambling, such as your pattern check answers, triggers, urges, check-ins, relapses, quit plan, and notes. It can also include health information you mention in AI coach conversations or community posts. Even the fact that you use QuitBet can say something about your health.
Here is how we handle it:
- We collect it only to provide the features you ask for, such as your quit plan, progress tracking, the AI coach, and the community, and we use it only for those features.
- We store it in our cloud database, linked to your account, so it stays available when you sign in.
- We do not use it to target ads, and we do not share it with advertising or attribution partners.
- We do not sell it.
- You can delete it by deleting your account.
If you live in Washington, Nevada, or Connecticut, our Consumer Health Data Privacy Policy explains your rights under those states' health data laws.
4. How We Use Information
We use personal information to:
- Provide the Service. Create and manage your account, build your quit plan, record check-ins and urges, show your progress, streaks, and money saved, and run guided programs, lessons, urge tools, the blocker, the AI coach, and the community.
- Manage subscriptions. Check your subscription status and unlock premium features.
- Communicate with you. Answer your questions, reply to contact form messages, and send service messages about your account, your subscription, or changes to our terms and policies. If you turn on notifications, we send reminders and updates. You can turn them off in your device settings.
- Keep the Service safe. Moderate community content, review reports, enforce our Terms of Use, and detect and prevent spam, fraud, abuse, and security problems.
- Fix and improve the Service. Understand which features are used, fix crashes and bugs, and improve performance, using usage information and crash data.
- Measure our marketing. If you allow tracking, measure which ad campaigns lead to installs and subscriptions. On our website, if you accept analytics cookies, understand how visitors use the site.
- Meet legal obligations. Comply with the law, respond to lawful requests, and protect our rights and the rights and safety of our users and others.
We may also create aggregated or de-identified information that cannot reasonably be linked to you, such as the average amount of money our users report saving, and use it to describe and improve QuitBet.
We do not use your recovery data, AI coach conversations, or community content to target ads, and we do not create profiles or inferences about you for advertising.
5. AI Coach, Community, and Blocker
AI coach
The AI coach is an automated chat feature. When you send it a message, we send that message to an AI model provider that processes it on our behalf to generate a reply. To make replies relevant, we may include related context, such as earlier messages in the conversation or details from your quit plan.
We keep your AI coach conversations with your account and treat them as recovery data. We do not share them with advertising partners.
AI coach replies are generated automatically. They can be wrong, and they are not advice from a doctor, therapist, or counselor. Please don't share details you don't need to, such as your full name, address, or financial account numbers.
Community Forum and group chat
What you post in the Community Forum or group chat is visible to other QuitBet users, along with the profile details shown next to your posts. Don't post anything that could identify you or someone else, such as a full name, phone number, address, workplace, or social media handle.
Other users can read, remember, or copy what you post, and we can't control that. You can report posts and block users in the app. We review reports and may remove content or suspend accounts that break our Terms of Use. We may also review community content to keep the community safe.
Website and app blocker
When you use the blocker, we use the websites, apps, or categories you choose to block to provide the blocking feature. We do not use the blocker to build a profile of your browsing history, and we do not sell browsing data.
7. Advertising, Tracking, and Sale of Data
App Tracking Transparency
The QuitBet app may ask for your permission to track you through Apple's App Tracking Transparency (ATT) prompt. "Tracking" means linking data from our app with data from other companies' apps or websites for advertising or ad measurement.
If you allow tracking, we may share your IDFA and app events, such as installs and subscription purchases, with advertising and attribution partners. They use this to tell us which ads led to installs and subscriptions.
If you don't allow tracking, we don't access or share your IDFA, and we don't track you across other companies' apps and websites. Ad attribution then runs only through Apple's SKAdNetwork. Apple, not us, tells ad networks in anonymized, aggregated form that an ad led to an install, sometimes with a limited conversion value such as whether a subscription started. It does not identify you or your device.
You can change your choice at any time in your iPhone's Settings app under Privacy & Security, then Tracking. You can turn tracking off for QuitBet, or turn off "Allow Apps to Request to Track" for all apps.
What we never share with advertising partners
We do not share your check-ins, urge logs, journal or trigger notes, quit plan, chat or forum content, AI coach conversations, or any other recovery data with advertising or attribution partners.
We do not sell your personal information
We do not sell personal information for money. Some state privacy laws define "sale", "sharing", and "targeted advertising" broadly. Under those laws, giving your IDFA and app events to advertising partners to measure ads may count as a "sale" or "sharing" of personal information, or as "targeted advertising". You can opt out of this at any time:
- Decline the ATT prompt, or turn tracking off in your iPhone's settings as described above.
- Email support@quitbet.co with the subject line "Do Not Sell or Share" and include the email address linked to your QuitBet account.
Our website runs no advertising tags and honors Global Privacy Control signals, as described in Section 8.
8. Our Website
You don't need an account to use quitbet.co. Here is what we collect there.
Contact form
If you use the contact form, we collect your name, email address, and message, and store them in our database. We use them only to respond to you. We run automated spam-prevention checks on submissions. We keep these messages for up to 24 months after the conversation ends, unless we need them longer for legal reasons.
App Store button clicks
Whatever your cookie choice, we count clicks on our App Store buttons as events in our own database. Each event includes the event type, the page path, which button was clicked, a random ID created for that single event (not stored on your device), an approximate country inferred from your browser's language setting, and your device type (mobile, tablet, or desktop). We don't use cookies or store anything on your device for this.
Analytics, only if you accept
If you click Accept in our cookie banner, we load Google Tag Manager and Google Analytics 4, and we store a few items in your browser, such as a random visitor ID. Our own events then also include the referring page, your browser's user agent, and your browser language. If you decline or don't make a choice, none of this loads. Our Cookie Policy lists every cookie and storage item.
Global Privacy Control and Do Not Track
If your browser sends a Global Privacy Control (GPC) signal, our website treats it as if you declined analytics: it does not load Google Tag Manager or Google Analytics and does not set analytics cookies, unless you later choose Accept yourself in Cookie settings. We also treat GPC as a request to opt out of the sale or sharing of personal information collected through that browser.
There is no agreed standard for how to respond to "Do Not Track" browser signals, so our website does not respond to them. It does respond to GPC as described above.
Server and security logs
Our website runs on our own web server behind a content delivery and security provider. Like most websites, they record standard server and security logs, including IP address, browser user agent, the URL requested, and the time. We use these logs to keep the site secure and working, and we typically keep them no more than 30 days.
9. Legal Bases for EEA and UK Users
If you are in the European Economic Area (EEA) or the United Kingdom, the law requires us to explain the legal bases we rely on to use your personal information.
| Legal basis | When we rely on it |
|---|---|
| Contract | To create your account and provide the features and subscription you signed up for. |
| Consent, including explicit consent | To process health-related recovery data, including AI coach conversations and community posts that reveal health information. Also to access your IDFA and share app events for ad measurement after you allow tracking, to set analytics cookies on our website, and to send push notifications. You can withdraw consent at any time. This does not affect processing that already happened. |
| Legitimate interests | To keep the Service secure, prevent spam and abuse, moderate the community, fix and improve the Service using usage and crash data, count App Store button clicks on our website, keep server logs, answer messages, and handle business transfers. We weigh these interests against your rights, and you can object. |
| Legal obligation | To comply with the law and respond to lawful requests. |
You have the right to complain to your local data protection supervisory authority. In the UK, that is the Information Commissioner's Office (ICO). We'd appreciate the chance to address your concern first, so please contact us.
10. How Long We Keep Information
We keep personal information only as long as we need it for the purposes in this policy.
| Information | How long we keep it |
|---|---|
| Account information, recovery data, AI coach conversations, and community content | While your account is active. When you delete your account, we delete this information (or, for community posts other users can see, delete or de-identify it) within 30 days. Copies in backups are deleted within 90 days. We may keep some information longer if the law requires it or to deal with a legal claim. |
| App usage and crash data | Up to 24 months, then deleted or aggregated. |
| Contact form messages and support emails | Up to 24 months after the conversation ends, unless we need them longer for legal reasons. |
| Website analytics (our own events and Google Analytics data) | Up to 24 months, then deleted or aggregated. |
| Website server and security logs | Typically no more than 30 days. |
| Your website cookie choice | Stored in your browser until you clear it or change it. |
Deleting the app from your phone does not delete your account. To delete your account, use Settings in the app or email us.
11. How We Protect Information
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, taking into account how sensitive recovery data is. We limit access to personal information to people and service providers who need it to run and support the Service.
No way of storing or sending data is completely secure, so we can't guarantee absolute security. You can help by keeping your device locked and your login details private. If a security breach affects your personal information, we will notify you and the authorities as the law requires.
12. International Data Transfers
We are based in the United States. We process and store information in the United States and in other countries where our service providers operate. Privacy laws there may differ from the laws where you live.
When we transfer personal information out of the EEA, the UK, or Switzerland to a country that those places do not consider to have adequate protection, we use safeguards the law recognizes, such as the European Commission's Standard Contractual Clauses (with the UK addendum), where required.
13. Your Privacy Rights
Depending on where you live, you may have some or all of the rights below. This includes residents of California, Virginia, Colorado, Connecticut, Texas, Oregon, and other US states with privacy laws, and people in the EEA and UK.
- Access. Confirm whether we process your personal information and get a copy of it.
- Correction. Ask us to fix inaccurate information. You can also change some information directly in the app.
- Deletion. Ask us to delete your personal information. You can also delete your account in the app.
- Portability. Get your information in a portable, commonly used format.
- Withdraw consent. Withdraw consent you gave, such as for health-related data or tracking. This doesn't affect processing that already happened. Features that depend on that data may stop working.
- Object or restrict. Object to processing based on our legitimate interests, or ask us to limit how we use your information.
- Opt out of targeted advertising, sale, or sharing. See Section 7.
- Opt out of profiling. Some laws let you opt out of profiling that has legal or similarly significant effects. We do not do this kind of profiling.
- Appeal. If we deny your request, you can appeal. See Section 14.
14. How to Exercise Your Rights
- In the app. Delete your account in Settings.
- By email. Email support@quitbet.co with the subject line "Privacy Request". Tell us what you want to do and include the email address linked to your QuitBet account.
Verification
To protect you, we verify requests before acting on them. We may ask you to confirm that you control the email address linked to your account, or for other information. We use it only to verify your request. If we can't verify your identity, we may not be able to complete the request.
Authorized agents
Where the law allows, you can have an authorized agent make a request for you. We may ask the agent for proof that you gave them signed permission, and we may ask you to verify your identity directly with us.
Response times
We respond within the time the law requires, usually within 45 days (one month in the EEA and UK). If we need more time, we'll tell you why and how long, as the law allows.
Appeals
If we deny your request in whole or in part, you can appeal by replying to our decision with "Appeal" in the subject line, or by emailing support@quitbet.co with the subject line "Appeal". We will respond in writing within the time your state's law requires and explain our decision. If you disagree with the outcome, you can contact your state attorney general.
No discrimination
We won't discriminate against you for exercising your privacy rights. We won't deny you the Service, charge you a different price, or give you a lower level of service because you made a request. If you ask us to delete information a feature needs, that feature may no longer work.
15. Children's Privacy
QuitBet is not directed to children under 16, and you must be at least 16 to use it. If you are under 18, you need permission from a parent or guardian.
We do not knowingly collect personal information from children under 13. If we learn that someone under 16 is using QuitBet or has given us personal information, we will delete their account and information. If you believe a child has given us information, contact us at support@quitbet.co.
16. California Privacy Notice
This section adds to the rest of this policy for California residents, as the California Consumer Privacy Act (CCPA) requires.
Personal information we collected in the last 12 months
The table below shows the categories of personal information we have collected in the last 12 months, where it came from, why we use it, who we disclose it to, and whether it is sold or shared. See Section 10 for how long we keep each category.
| Category | Examples | Sources | Why we use it | Who we disclose it to | Sold or shared? |
|---|---|---|---|---|---|
| Identifiers | Email address, account ID, username, IP address, app installation identifiers. Your IDFA only if you allow tracking. A random website visitor ID only if you accept analytics cookies. | You, your device or browser, Apple | Provide and secure the Service, manage your account and subscription, support, analytics, ad measurement | Hosting and database, subscription management, analytics and crash reporting, website infrastructure and analytics providers. Advertising and attribution partners (IDFA and app identifiers, only if you allow tracking). | Shared for ad measurement, only if you allow tracking. Not sold for money. |
| Customer records | Name and email address | You | Account management, support, replying to messages | Hosting and database providers | No |
| Commercial information | Subscription status, plan purchased, renewal and expiration dates. We do not receive payment card details. | Apple, subscription management provider | Unlock premium features, manage subscriptions, support, ad measurement | Subscription management, hosting and database providers. Advertising and attribution partners (subscription events, only if you allow tracking). | Subscription events are shared for ad measurement, only if you allow tracking. Not sold for money. |
| Internet or other electronic network activity | App usage events, crash and diagnostic data, website App Store button clicks, referring page, browser user agent, browser language | Your device or browser | Operate, fix, and improve the Service, security, website analytics, ad measurement | Analytics and crash reporting, hosting and database, website infrastructure and analytics providers (Google Analytics only if you accept). Advertising and attribution partners (install events, only if you allow tracking). | App install events are shared for ad measurement, only if you allow tracking. Not sold for money. |
| Geolocation data | Approximate country only, inferred from your browser language or IP address. We do not collect precise location. | Your device or browser | Understand where users and visitors come from, security | Hosting and database, analytics providers | No |
| Sensitive personal information | Health-related recovery data (pattern check answers, triggers, urges, check-ins, relapses, quit plan, notes, money-related recovery data, and AI coach or community content that reveals health information). Account login details. | You | Provide the features you ask for, secure your account | Hosting and database providers. AI model providers (AI coach messages only). Other users (only content you post in the community). | No |
| Inferences | Personalization based on your answers, such as which triggers your quit plan focuses on. We do not create inferences for advertising. | Derived from information you give us | Personalize your quit plan and tools | Hosting and database providers | No |
Sensitive personal information
We use sensitive personal information only to provide the Service you ask for, to keep it secure, and for other purposes the CCPA allows. We don't use it to infer characteristics about you. Because of this, we don't offer a separate right to limit its use.
Sale and sharing
We do not sell personal information for money. As explained in Section 7, if you allow tracking, we share identifiers and app events with advertising partners for ad measurement, which may count as "sharing" under the CCPA. You can opt out as described there. We have no actual knowledge of selling or sharing personal information of consumers under 16.
"Shine the Light"
California Civil Code Section 1798.83 lets California residents ask about personal information a business discloses to third parties for their own direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.
17. Other Websites and Services
The Service may link to websites and services we don't operate, such as the App Store, helplines, and social media. Their own privacy policies apply when you use them. Apple's privacy practices are described at apple.com/legal/privacy.
18. Changes to This Policy
We may update this policy from time to time. We'll post the new version here and change the "Last updated" date. If we make material changes, we'll give you more notice, such as an in-app message or an email, before they take effect. Where the law requires, we'll ask for your consent before using personal information in a materially different way.
19. Contact Us
For questions or requests about this policy or your personal information, email support@quitbet.co.
TheLoop Holdings, LLC
A Delaware limited liability company
Email: support@quitbet.co
Registered agent (legal notices only): 131 Continental Dr, Suite 305, Newark, DE 19713, USA